Sending questionnaires
Issue questionnaires and collect answers
A questionnaire on its own does nothing. Sending it to a vendor creates an assessment, issues tokens to the recipients, and starts the clock.
Building the questionnaire
Assemble questions from the question bank into ordered sections. A questionnaire declares:
- Title and description — what the vendor sees first.
- Languages — which localized versions are available to send.
- Section ratings and weights — how sections roll up into a score.
Save it as a draft while you work; publish when it is ready to send.
Sending
Pick the vendor and language
The vendor's primary contact is the default recipient. The language must be one the questionnaire declares.
Add recipients
Each recipient gets their own token. Split a long questionnaire across a security contact and a legal contact rather than making one person chase the other.
Set the deadline
The deadline sets token expiry and the reminder schedule. Sending logs an
invitation sent activity.
What the vendor sees
A link, no account, no password. The questionnaire renders section by section, conditional questions appear only when they apply, and progress is saved as they go — a vendor can close the tab and come back.
Where a question requires evidence, the upload sits with the question and the vendor cannot submit without it.
Chasing responses
Reminders
Reminders are sent automatically ahead of the deadline and recorded on the activity log. Manual nudges are logged the same way.
Extending and reissuing
Deadlines can be extended, tokens extended or reissued to a different address, and recipients revoked when someone leaves. Every one of those is on the log with its actor.
When nobody answers
An assessment past its deadline expires. If the vendor simply will not engage, close it as non-cooperative — recorded distinctly from a cancellation, which matters when you are explaining coverage gaps later.
Reviewing answers
Submitted questionnaires land in Pending review with findings already attached to the answers that raised them. Request changes to send it back for a specific fix; the resubmission is logged separately from the first attempt.
See Assessments for the review flow and what happens after completion.